Privacy Policy
Effective: September 1, 2026
This Privacy Policy explains how F2T2 (“F2T2,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the F2T2 mobile application, website, and related services (collectively, the “Service”).
F2T2 is an independent organizational fitness-tracking tool. It is not an official application of the United States Air Force, Department of Defense, or any other government agency, and no government endorsement is implied.
1. Information we collect
Account information
- Email address
- Display name or nickname
- Password, stored only as a one-way cryptographic hash
- Account role, such as commander, supervisor, or member
- Unit and group assignments
Fitness activity
- Workout date and activity type, such as strength, cardio, recreation, or group PT
- Workout notes you choose to enter and the time an entry is logged
- Participation history, summaries, and reports generated from those records
Security and technical information
- Authentication and email-verification records
- Password-reset and verification codes, expiration times, and use status
- IP address and limited request logs used for security, fraud prevention, rate limiting, and troubleshooting
- Basic server logs such as request time, requested endpoint, response status, and account identifier when relevant to an audited security event
F2T2 does not intentionally collect precise location, contacts, advertising identifiers, payment-card information, medical diagnoses, official fitness-assessment results, or information from Apple Health.
2. How we use information
- Create, verify, secure, and maintain accounts
- Allow members to join units and groups
- Store workout entries and produce personal, group, and unit summaries
- Provide authorized commanders and supervisors with role-appropriate reports
- Send verification and password-reset emails
- Detect abuse, enforce temporary lockouts, protect accounts, and troubleshoot the Service
- Comply with legal obligations and protect the rights and safety of users and the Service
3. Who can see your information
You can see your own account and workout history. Depending on unit configuration and assigned roles, authorized commanders and supervisors may see member identity, unit or group assignment, workout activity, participation summaries, and reports for personnel within their authorized scope.
Unit administrators are responsible for managing access codes, role assignments, and appropriate use of information available to them.
4. How we share information
We do not sell personal information. We do not share information for cross-context behavioral advertising and do not use it to track you across apps or websites owned by other companies.
We may disclose information to service providers that process it on our behalf, including:
- Replit, for application hosting, database infrastructure, and related platform services
- Resend, for transactional email delivery, including verification and password-reset messages
We may also disclose information when required by law, to respond to valid legal process, or when reasonably necessary to prevent fraud, abuse, security incidents, or harm.
5. Data retention
We retain account and workout information while your account is active and as needed to operate the Service. Security logs and expired verification or reset records may be retained for a limited period for fraud prevention, troubleshooting, audit, and legal purposes. When an account is deleted, we delete or de-identify associated information unless retention is required by law, necessary to resolve a security matter, or preserved in limited backup systems until those backups cycle out.
6. Security
We use administrative, technical, and organizational safeguards designed to protect information. Measures include encrypted network connections, cryptographically hashed passwords, verified email addresses, request rate limits, temporary account lockouts, role-based access controls, audit logging, and secure native-device storage for authentication tokens.
No system can guarantee absolute security. You are responsible for protecting your password, device, and unit access codes and for notifying us if you suspect unauthorized access.
7. Your choices and rights
You may delete your account directly in F2T2 from Profile or Account settings. Select Delete Account, re-enter your password, and complete the permanent-deletion confirmation. You will be signed out when deletion is complete.
If you cannot access the app, you may request deletion by emailing jon@garagetubeapp.com from the address associated with your account. We may need to verify your identity. Full instructions are available at f2t2.replit.app/account-deletion.
Depending on where you live, applicable law may provide additional rights, including rights to know, correct, delete, or obtain a copy of personal information and to appeal certain decisions. We will not discriminate against you for exercising an applicable privacy right.
8. Children’s privacy
The Service is intended for adults and authorized organizational users. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to the Service.
9. International use
The Service is operated from the United States. If you access it from another country, your information may be processed in the United States, where privacy laws may differ from those in your jurisdiction.
10. Medical and government disclaimer
F2T2 does not provide medical advice, diagnosis, or treatment and does not determine official military readiness or official physical fitness assessment results. Do not enter sensitive medical information in workout notes.
11. Changes to this policy
We may update this policy as the Service changes. We will publish the revised policy here and update the effective date. Material changes may also be communicated through the Service or by email when appropriate.
12. Contact us
For privacy questions or requests:
F2T2 Privacy
jon@garagetubeapp.com